# Anti-VPN > Block VPN, proxy, and datacenter connections from your Minecraft server. [![Available on Modrinth](https://r2.sqidgeon.uk/compact/available/modrinth_vector.svg)](https://modrinth.com/plugin/anti-vpn) --- ## Platforms [![Supported on Paper](https://r2.sqidgeon.uk/compact/supported/paper_vector.svg)](https://modrinth.com/plugin/anti-vpn/versions) [![Supported on Bukkit](https://r2.sqidgeon.uk/compact/supported/bukkit_vector.svg)](https://modrinth.com/plugin/anti-vpn/versions) [![Supported on Spigot](https://r2.sqidgeon.uk/compact/supported/spigot_vector.svg)](https://modrinth.com/plugin/anti-vpn/versions) [![Supported on Purpur](https://r2.sqidgeon.uk/compact/supported/purpur_vector.svg)](https://modrinth.com/plugin/anti-vpn/versions) [![Supported on Velocity](https://r2.sqidgeon.uk/compact/supported/velocity_vector.svg)](https://modrinth.com/plugin/anti-vpn/versions) --- ## Requirements - **Java:** 11+ according to this plugin description; your Minecraft server may require a newer Java version. - **LuckPerms** *(optional — falls back to Bukkit permissions)* - Internet access on first start to download blocklists *(works offline after that)* --- ## Features - **Key-free detection** — powered entirely by free, open-source IP blocklists - **SQLite & MySQL support** — built-in local database or connect to your own external server - **Four combined blocklists** — covering attacks, anonymizers, commercial VPNs, and datacenters - **Auto-updating lists** — downloads fresh data from GitHub on startup and on a configurable schedule - **Local list caching** — all lists saved to disk with dated backups, works offline after first download - **Zero login lag** — CIDR matching runs entirely in-memory, microsecond-fast per connection - **LuckPerms integration** — full permission node support with per-group and per-player bypass - **Fully customisable messages** — every player-facing string lives in `messages.yml` - **In-game management** — add, remove, and inspect IPs and players without touching any files --- ## Images ### With a VPN ![Image 2](https://r2.sqidgeon.uk/anti-vpn/image2.png) ![Image 1](https://r2.sqidgeon.uk/anti-vpn/image1.png) ### Without a VPN ![Image 2](https://r2.sqidgeon.uk/anti-vpn/image3.png) --- ## How Detection Works AntiVPN combines **four free blocklists** into a single in-memory CIDR matcher that checks every connecting IP in milliseconds: | List | Source | Covers | |---|---|---| | `firehol_level1.netset` | [Firehol](https://github.com/firehol/blocklist-ipsets) | Attacks, malware, bogon ranges | | `firehol_anonymous.netset` | [Firehol](https://github.com/firehol/blocklist-ipsets) | Tor, open proxies, anonymizers | | `x4bnet_vpn.netset` | [X4BNet](https://github.com/X4BNet/lists_vpn) | ProtonVPN, Mullvad, NordVPN, ExpressVPN & more | | `x4bnet_datacenter.netset` | [X4BNet](https://github.com/X4BNet/lists_vpn) | AWS, OVH, Hetzner, DigitalOcean & more | All lists are downloaded to `plugins/AntiVPN/firehol/` on first start and automatically refreshed. Dated backup copies are kept every time a new download succeeds. An optional **reverse-DNS heuristic** further checks PTR records against known VPN/hosting hostname patterns as a secondary layer. --- ## Database AntiVPN stores blocked IPs, allowed IPs, and bypass players in a real database. **SQLite** (default — zero setup): ```yaml database: type: sqlite ``` Creates `plugins/AntiVPN/antivpn.db` automatically on first start. **MySQL / MariaDB** (external server): ```yaml database: type: mysql mysql: host: your.db.host port: 3306 database: antivpn username: antivpn_user password: "yourpassword" ``` --- ## LuckPerms Permissions AntiVPN integrates with LuckPerms out of the box. If LuckPerms isn't installed it falls back to Bukkit permissions automatically. | Permission | Default | Description | |---|---|---| | `antivpn.admin` | OP | All permissions including bypass | | `antivpn.bypass` | `false` | **Skip all VPN checks at login** | | `antivpn.allow` | OP | Use `/ipallow` | | `antivpn.block` | OP | Use `/ipblock` | | `antivpn.list` | OP | Use `/iplist` | | `antivpn.user` | OP | Use `/ipuser` | | `antivpn.update` | OP | Use `/ipupdate` | Grant bypass to a group via LuckPerms: ``` /lp group vip permission set antivpn.bypass true ``` --- ## Commands ### `/ipblock` — Manage the IP block-list | Subcommand | Description | |---|---| | `/ipblock add ` | Block an IP address | | `/ipblock remove ` | Unblock an IP address | | `/ipblock list` | Show all manually blocked IPs | | `/ipblock check ` | Show block/allow status of an IP | ### `/ipallow` — Manage the IP allow-list | Subcommand | Description | |---|---| | `/ipallow add ` | Whitelist an IP (bypasses all checks) | | `/ipallow remove ` | Remove from allow-list | | `/ipallow list` | Show all allowed IPs | ### `/ipuser` — Manage bypass players | Subcommand | Description | |---|---| | `/ipuser add ` | Exempt a player from all VPN checks | | `/ipuser remove ` | Remove exemption | | `/ipuser list` | Show all bypass players | | `/ipuser check ` | Check a player's bypass status | | `/ipuser lookup ` | Show an online player's IP and full status | ### `/iplist` — View all lists | Subcommand | Description | |---|---| | `/iplist` | Summary of all list sizes | | `/iplist blocked` | Full blocked IP list | | `/iplist allowed` | Full allowed IP list | | `/iplist users` | Full bypass player list | ### `/ipupdate` — Manage blocklists | Subcommand | Description | |---|---| | `/ipupdate` | Force-download all lists now | | `/ipupdate status` | Show list file sizes, dates, and active CIDR count | | `/ipupdate reload` | Reload matcher from existing local files | | `/ipupdate backups` | List all dated backup files | --- ## Configuration ### `config.yml` ```yaml log-connections: true database: type: sqlite # or "mysql" lists: firehol-level1: true firehol-anonymous: true x4bnet-vpn: true # Covers ProtonVPN, Mullvad, NordVPN etc. x4bnet-datacenter: true # Covers AWS, OVH, Hetzner etc. firehol: update-interval-hours: 24 force-update-on-start: false reverse-dns-check: true ``` ### `messages.yml` Every message the plugin sends is fully customisable. Supports `&` colour codes and `{placeholders}`. ```yaml general: prefix: "&8[&cAntiVPN&8] &r" kick: message: "&c&lConnection Refused\n&7VPN connections are not permitted." ipblock: added: "{prefix}&c{ip} &7has been added to the block-list." # ... and many more ``` --- ## File Structure After first startup your plugin folder will look like this: ``` plugins/AntiVPN/ ├── antivpn.db ← SQLite database (all your lists) ├── config.yml ├── messages.yml └── firehol/ ├── firehol_level1.netset ├── firehol_anonymous.netset ├── x4bnet_vpn.netset ├── x4bnet_datacenter.netset └── *.bak ← Dated backups of each list ``` --- ## Support [![Discord](https://r2.sqidgeon.uk/compact/social/discord-plural_vector.svg)](https://discord.gg/J2RRQcjHsM) --- _{This project is maintained by sqidgeon. You are NOT allowed to re-distribute this plugin without consent from us!}